300-910 practice question 7 of 25

How long analysis systems such as Elasticsearch, Logstash, and Kibana Stack handle ingesting unstructured logs from different devices in various formats?

Answer options

A: All devices that generate syslogs must use agents that process the local logs and transmit them in a specific format to the ELK Stack.

B: All logs are stored in their unstructured text format, and the ELK Stack performs data analysis by intelligently parsing the logs using machine learning algorithms.

C: All different message formats are parsed separately using custom filters, and the resulting structured data is stored for later analysis. Correct answer

D: A single, comprehensive log format is defined on the ELK Stack. All incoming logs, regardless of format, are transformed to match the comprehensive format, and only applicable fields are populated.

Correct Answer:

C. All different message formats are parsed separately using custom filters, and the resulting structured data is stored for later analysis.

Explanation

The ELK Stack (Elasticsearch, Logstash, and Kibana) can handle ingesting unstructured logs from various devices in different formats by running custom filters on the logs. The filters are designed to parse the log data and extract the relevant, structured information from it, which is then stored for later analysis. This allows for faster and more accurate analysis of the data, and enables more sophisticated insights to be drawn from it.

Keep practicing

Take the free 300-910 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test